linux-malware icon indicating copy to clipboard operation
linux-malware copied to clipboard

[Intel]: https://sansec.io/research/cronrat

Open timb-machine opened this issue 3 years ago • 0 comments

Area

Malware reports

Parent threat

Defense Evasion, Command and Control

Finding

https://sansec.io/research/cronrat

Industry reference

uses:/dev/shm attack:T1053.003:Cron attack:T1027:Obfuscated Files or Information attack:T1001.003:Protocol Impersonation attack:T1036.005:Match Legitimate Name or Location vertical:Retail

Malware reference

CronRAT wltm

Actor reference

No response

Component

Linux

Scenario

No response

Scenario variation

No response

timb-machine avatar Apr 20 '22 10:04 timb-machine